Medium · 4.3 CVE-2025-23765 EUVD-2025-3399GHSA-rv5x-grwj-92hm

WordPress W3SPEEDSTER plugin <= 7.33 - Cross Site Request Forgery (CSRF) vulnerability

Published Jan 16, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: w3speedster Product: W3SPEEDSTER

Description

Cross-Site Request Forgery (CSRF) vulnerability in w3speedster W3SPEEDSTER w3speedster-wp allows Cross Site Request Forgery.This issue affects W3SPEEDSTER: from n/a through <= 7.33.

Affected products

Vendor	Product	Affected	Fixed
w3speedster	W3SPEEDSTER	≤ 7.33	—

References

https://patchstack.com/database/Wordpress/Plugin/w3speedster-wp/vulnerability/wordpress-w3speedster-plugin-7-33-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry